

Correct, but you get what you pay for. And they’re worth the cost. I wouldn’t trust a free VPN as much as I don’t trust an ISP. Even paid VPNs shouldn’t be wholly trusted either. But, the two I mentioned are probably the most reputable for privacy, besides Tor.
Yes they’re an OG private mail provider who then started offering VPN. I have mixed feelings about their service. It’s average imo. But yes if you’re really wanting free then either Proton or AdGuard are probably somewhat trustworthy-ish.